CveMateVulnerability intelligence

Microsoft Sql Server 2025 vulnerabilities, page 4

71 vulnerabilities

Known vulnerabilities in Microsoft Sql Server 2025, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2026-67388microsoftmicrosoft sql server 2017 (cu 31)+111mo ago08-09-2026 17:14

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.CVE-2026-67642microsoftmicrosoft sql server 2025 (cu8)+21mo ago08-09-2026 17:14

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.CVE-2026-67641microsoftmicrosoft sql server 2022 (cu 26)+51mo ago08-09-2026 17:14

Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network.CVE-2026-67631microsoftmicrosoft sql server 2017 (cu 31)+111mo ago08-09-2026 17:10

Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.CVE-2026-67370microsoftmicrosoft sql server 2017 (cu 31)+111mo ago08-09-2026 17:10

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2026-67393microsoftmicrosoft sql server 2017 (cu 31)+111mo ago08-09-2026 17:14

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-67384microsoftmicrosoft sql server 2017 (cu 31)+111mo ago08-09-2026 17:13

Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network.CVE-2026-32176microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+176mo ago14-04-2026 16:58

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.CVE-2026-32167microsoftmicrosoft sql server 2016 service pack 3 azure connect feature pack+146mo ago14-04-2026 16:57

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.CVE-2026-50468microsoftmicrosoft sql server 2025 (cu 6)+23mo ago14-07-2026 17:09

Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.CVE-2026-33120microsoftmicrosoft sql server 2022 (gdr)+56mo ago14-04-2026 16:57

Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.